MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cdeebfd761066807f514e1f6f398ba7211093ee953c0cfec3151257eda1d7237. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cdeebfd761066807f514e1f6f398ba7211093ee953c0cfec3151257eda1d7237
SHA3-384 hash: b9a679ae96c9bcd3e199b4252ee9d452a274de38fe35d80513cdf60cc53bc48770a39eb9ea617a4cde4d3ab79c598abb
SHA1 hash: 407c03a77b21f3b5076d4d6b34f21460d0de677d
MD5 hash: 9d295d17d1ebfa4f3a3cb1f7c0b11557
humanhash: fifteen-golf-magazine-river
File name:Purchase Order Needed.Pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:439'001 bytes
First seen:2020-05-26 04:54:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:rzYc+YCaAwAwmBM/m7nhw9MDBWFJqkX0j5X6a2Z65SbF/iUeGrL+BeKlePDR:rscXCvl9htmXXgbP+F1j+ESePt
TLSH 9F94239B151EF843DADE47378B5CBE245A844D8ED86144CEB3B1B10BF227831C9646EB
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25516.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.22205.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-05-26 05:36:30 UTC
File Type:
Binary (Archive)
Extracted files:
15
AV detection:
27 of 48 (56.25%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip cdeebfd761066807f514e1f6f398ba7211093ee953c0cfec3151257eda1d7237

(this sample)

AgentTesla

Executable exe 314843bc96cbfa3115bc86edd37758ecdaaf6af6ae543a64014e921fda7294fb

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 314843bc96cbfa3115bc86edd37758ecdaaf6af6ae543a64014e921fda7294fb
  
Dropping
MD5 a67bd793586a4318710f2ea5f708124a

Comments